latestOpenAPI 3.0.02026-08-101013821017.9 KB

4b69392f93b9

Token

Authenticated shopper token (Client Hosted Shopper)

Use this Client Credentials Grant OAuth flow when the Digital River partner maintains the shopper login and password credentials. <br> <br> Request a full access token for the authenticated shopper by providing the shopper's external reference identifier and the client_credentials enum as the grant type. <br> <br> Security requires HTTP basic authentication (base-64 encoded), a user API key, and a password (secret key). <br> <br> <b>Important</b>: Never expose or visibly display the Limited or Full Access Tokens requested by the APIs to the customer (such as plain text in a cookie). Suppose a customer has access to these tokens. They could bypass any restrictions built into the store frontend and place orders directly on our systems via publicly documented APIs.

post/oauth20/token (Client Hosted Shopper)

Response

Successful response.

access_tokenstring
token_typestring
expires_instring

Example response

{
  "access_token": "your_access_token",
  "token_type": "bearer",
  "expires_in": "3599"
}